rhymes
cfba42c07d
Upgrade Rails to 5.2.4.2 to fix CVE-2020-5267 ( #6731 ) [deploy]
2020-03-19 19:21:59 +01:00
dependabot-preview[bot]
0111eb33dd
Bump inline_svg from 1.7.0 to 1.7.1 ( #6718 )
...
Bumps [inline_svg](https://github.com/jamesmartin/inline_svg ) from 1.7.0 to 1.7.1.
- [Release notes](https://github.com/jamesmartin/inline_svg/releases )
- [Changelog](https://github.com/jamesmartin/inline_svg/blob/master/CHANGELOG.md )
- [Commits](https://github.com/jamesmartin/inline_svg/compare/v1.7.0...v1.7.1 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-03-19 13:22:57 -04:00
dependabot-preview[bot]
38ce1c5bee
Bump pg from 1.2.2 to 1.2.3 ( #6717 )
...
Bumps [pg](https://github.com/ged/ruby-pg ) from 1.2.2 to 1.2.3.
- [Release notes](https://github.com/ged/ruby-pg/releases )
- [Changelog](https://github.com/ged/ruby-pg/blob/master/History.rdoc )
- [Commits](https://github.com/ged/ruby-pg/commits )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-03-19 13:22:23 -04:00
Andy Zhao
3412883342
Upgrade recaptcha to 5.4.1 to fix production error ( #6681 ) [deploy]
...
* Use legacy 5.3.0 response param name
* Use latest recaptcha gem
* Remove additional space
* Revert verify_recaptcha workaround
2020-03-18 10:27:48 +01:00
rhymes
20fd8cdb92
Replace observers with callbacks and remove rails-observers ( #6675 )
...
* Add test for vomit reactions ping
* Remove reaction observer
* Add tests for new published article ping
* Remove reaction observer
* Remove comment observer
* Fix specs
* Remove rails-observer gem
2020-03-18 09:58:36 +01:00
Nick Taylor
ccf7e6e5bf
Upgrade to webpacker/webpack 4 and Babel 7 ( #6664 )
...
Upgraded to webpacker 4/webpack 4 and Babel 7
2020-03-17 08:20:36 -04:00
dependabot-preview[bot]
1d9c8a8e11
Bump sdoc from 1.0.0 to 1.1.0 ( #6655 ) [deploy]
2020-03-16 14:06:00 -04:00
dependabot[bot]
a0c959e02a
Bump administrate from 0.12.0 to 0.13.0 ( #6631 ) [deploy]
...
Bumps [administrate](https://github.com/thoughtbot/administrate ) from 0.12.0 to 0.13.0.
- [Release notes](https://github.com/thoughtbot/administrate/releases )
- [Changelog](https://github.com/thoughtbot/administrate/blob/master/CHANGELOG.md )
- [Commits](https://github.com/thoughtbot/administrate/compare/v0.12.0...v0.13.0 )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-03-16 12:45:44 -04:00
dependabot-preview[bot]
3282c90e6f
Bump ddtrace from 0.33.0 to 0.33.1 ( #6661 ) [deploy]
2020-03-16 12:13:07 -04:00
dependabot-preview[bot]
339696b305
Bump honeybadger from 4.5.6 to 4.6.0 ( #6656 )
2020-03-16 12:12:47 -04:00
dependabot-preview[bot]
badb179038
Bump rubyzip from 2.2.0 to 2.3.0 ( #6658 )
2020-03-16 12:10:42 -04:00
dependabot-preview[bot]
9a6579cf50
Bump aws-sdk-lambda from 1.36.0 to 1.37.0 ( #6660 ) [deploy]
2020-03-16 11:51:14 -04:00
dependabot-preview[bot]
1da77e462c
Bump recaptcha from 5.3.0 to 5.4.0 ( #6657 )
2020-03-16 11:50:53 -04:00
dependabot-preview[bot]
e2de95b94a
Bump parallel_tests from 2.31.0 to 2.32.0 ( #6659 )
2020-03-16 11:50:22 -04:00
Molly Struve
bd10c9086c
Enable Hypershield in Production Take 2 ( #6628 ) [deploy]
2020-03-16 09:10:01 -05:00
rhymes
ae1f4faf3a
Upgrade octokit and rouge ( #6623 )
...
* Bump octokit to 4.17.0
* Bump rouge to 3.17.0
2020-03-13 15:15:05 -04:00
rhymes
ea37fe8ff8
Upgrade rspec-rails, ruby-prof and webmock ( #6624 )
...
* Bump rspec-rails to 3.9.1
* Bump ruby-prof to 1.3.1
* Bump webmock to 3.8.3
2020-03-13 15:14:36 -04:00
Liz Fong-Jones
239edd5204
use beeline 2.0 ( #6568 ) [deploy]
2020-03-10 12:35:15 -04:00
Mac Siri
8e4905522d
Implement KatexTag ( #6237 ) [deploy]
...
* Install Katex gem
* Add Katex stylesheet and spec
* Implement basic error handling
* Remove comment
* Create more spec
* Update approval file
Changes is due to turning off RedCarpet's superscript feature
* Add instruction to _editor_guide_text
* Serve our own KaTeX css
* Apply Rhyme's suggestion
* Limit Katex's css use
* Update spec
* Add spec
Co-authored-by: Ben Halpern <bendhalpern@gmail.com>
2020-03-09 17:58:54 -04:00
Molly Struve
3fa1287c2d
remove hypershield ( #6554 ) [deploy]
2020-03-09 13:41:20 -04:00
dependabot-preview[bot]
952930eb07
Bump ddtrace from 0.32.0 to 0.33.0 ( #6534 ) [deploy]
...
Bumps [ddtrace](https://github.com/DataDog/dd-trace-rb ) from 0.32.0 to 0.33.0.
- [Release notes](https://github.com/DataDog/dd-trace-rb/releases )
- [Changelog](https://github.com/DataDog/dd-trace-rb/blob/master/CHANGELOG.md )
- [Commits](https://github.com/DataDog/dd-trace-rb/compare/v0.32.0...v0.33.0 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-03-09 11:12:50 -04:00
dependabot-preview[bot]
ec93710a58
Bump oj from 3.10.3 to 3.10.5 ( #6533 )
...
Bumps [oj](https://github.com/ohler55/oj ) from 3.10.3 to 3.10.5.
- [Release notes](https://github.com/ohler55/oj/releases )
- [Changelog](https://github.com/ohler55/oj/blob/develop/CHANGELOG.md )
- [Commits](https://github.com/ohler55/oj/compare/v3.10.3...v3.10.5 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-03-09 11:12:24 -04:00
Molly Struve
521cf57e63
Create Hypershield Schema to Shield Sensitive data in Production ( #6461 ) [deploy]
2020-03-09 08:54:31 -04:00
Molly Struve
699820e5e3
install Blazer for querying the database ( #6459 ) [deploy]
2020-03-05 08:07:58 -05:00
Molly Struve
02bc86fb1e
Revert 6395 dependabot/bundler/twilio ruby 5.31.5 ( #6455 )
...
* Revert "Bump twilio-ruby from 5.31.1 to 5.31.5 (#6395 )"
This reverts commit f05a351906
2020-03-04 13:13:49 -05:00
Ben Halpern
1dc1723709
Add field test gem to establish a/b testing ( #6283 ) [deploy]
...
* Initial field test spec work
* Clean up specs
* Fix codeclimage
* Cleanups
* Update names
* Rename and remove need to pass logged in status
* Leadup to prod: two experiments
* Move test logic to controller and add tests
Co-authored-by: Josh Puetz <josh@grorichpuetz.com>
2020-03-03 10:21:29 -05:00
dependabot-preview[bot]
f05a351906
Bump twilio-ruby from 5.31.1 to 5.31.5 ( #6395 )
2020-03-03 09:22:38 -05:00
rhymes
ea0c062ef7
Bump omniauth to 1.9.1 ( #6420 )
2020-03-03 09:17:15 -05:00
rhymes
eb3339b747
Bump reverse_markdown to 2.0 ( #6419 )
2020-03-03 14:53:55 +01:00
dependabot-preview[bot]
bfaa9b5f4f
Bump google-api-client from 0.37.1 to 0.37.2 ( #6394 ) [deploy]
2020-03-02 12:51:53 -05:00
dependabot-preview[bot]
239ab4022c
Bump launchy from 2.4.3 to 2.5.0 ( #6393 )
2020-03-02 12:42:00 -05:00
dependabot-preview[bot]
1c9ed1a6b3
Bump oj from 3.10.2 to 3.10.3 ( #6398 )
2020-03-02 11:19:11 -05:00
dependabot-preview[bot]
dd210e89fd
Bump nokogiri from 1.10.8 to 1.10.9 ( #6392 )
...
Bumps [nokogiri](https://github.com/sparklemotion/nokogiri ) from 1.10.8 to 1.10.9.
- [Release notes](https://github.com/sparklemotion/nokogiri/releases )
- [Changelog](https://github.com/sparklemotion/nokogiri/blob/v1.10.9/CHANGELOG.md )
- [Commits](https://github.com/sparklemotion/nokogiri/compare/v1.10.8...v1.10.9 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-03-02 11:16:08 -05:00
dependabot-preview[bot]
b3c07fd850
Bump bootsnap from 1.4.5 to 1.4.6 ( #6397 ) [deploy]
...
Bumps [bootsnap](https://github.com/Shopify/bootsnap ) from 1.4.5 to 1.4.6.
- [Release notes](https://github.com/Shopify/bootsnap/releases )
- [Changelog](https://github.com/Shopify/bootsnap/blob/master/CHANGELOG.md )
- [Commits](https://github.com/Shopify/bootsnap/compare/v1.4.5...v1.4.6 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-03-02 10:52:40 -05:00
dependabot-preview[bot]
70939f0c38
Bump better_errors from 2.5.1 to 2.6.0 ( #6396 )
...
Bumps [better_errors](https://github.com/BetterErrors/better_errors ) from 2.5.1 to 2.6.0.
- [Release notes](https://github.com/BetterErrors/better_errors/releases )
- [Commits](https://github.com/BetterErrors/better_errors/compare/v2.5.1...v2.6.0 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-03-02 10:51:24 -05:00
dependabot-preview[bot]
af7f0b0cb9
Bump elasticsearch from 7.4.0 to 7.5.0 ( #6400 )
...
Bumps [elasticsearch](https://github.com/elasticsearch/elasticsearch-ruby ) from 7.4.0 to 7.5.0.
- [Release notes](https://github.com/elasticsearch/elasticsearch-ruby/releases )
- [Changelog](https://github.com/elastic/elasticsearch-ruby/blob/v7.5.0/CHANGELOG.md )
- [Commits](https://github.com/elasticsearch/elasticsearch-ruby/compare/v7.4.0...v7.5.0 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-03-02 10:25:08 -05:00
dependabot-preview[bot]
561af1e7f3
Bump stripe from 5.15.0 to 5.17.0 ( #6391 )
...
Bumps [stripe](https://github.com/stripe/stripe-ruby ) from 5.15.0 to 5.17.0.
- [Release notes](https://github.com/stripe/stripe-ruby/releases )
- [Changelog](https://github.com/stripe/stripe-ruby/blob/master/CHANGELOG.md )
- [Commits](https://github.com/stripe/stripe-ruby/compare/v5.15.0...v5.17.0 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-03-02 10:06:09 -05:00
dependabot-preview[bot]
ca6bc195a3
[Security] Bump puma from 4.3.1 to 4.3.3 ( #6384 ) [deploy]
2020-03-02 08:20:35 -05:00
rhymes
c3e7179f5b
Bump to sprockets 4.0.0 ( #6172 ) [deploy]
...
* Bump to sprocket 4.0.0
* Add manifest.js
* Link internal/layout.css
* Make it more similar to Rails 5.2 default
2020-02-24 18:16:08 -05:00
dependabot-preview[bot]
21234273b7
Bump ruby-prof from 1.2.0 to 1.3.0 ( #6265 )
...
Bumps [ruby-prof](https://github.com/ruby-prof/ruby-prof ) from 1.2.0 to 1.3.0.
- [Release notes](https://github.com/ruby-prof/ruby-prof/releases )
- [Changelog](https://github.com/ruby-prof/ruby-prof/blob/master/CHANGES )
- [Commits](https://github.com/ruby-prof/ruby-prof/compare/1.2.0...1.3.0 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-02-24 11:12:24 -05:00
dependabot-preview[bot]
6907aef386
Bump aws-sdk-lambda from 1.35.0 to 1.36.0 ( #6270 )
...
Bumps [aws-sdk-lambda](https://github.com/aws/aws-sdk-ruby ) from 1.35.0 to 1.36.0.
- [Release notes](https://github.com/aws/aws-sdk-ruby/releases )
- [Changelog](https://github.com/aws/aws-sdk-ruby/blob/master/gems/aws-sdk-lambda/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-ruby/compare/v1.35.0...v1.36.0 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-02-24 11:12:05 -05:00
dependabot-preview[bot]
0ed64a928e
Bump google-api-client from 0.37.0 to 0.37.1 ( #6263 )
...
Bumps [google-api-client](https://github.com/google/google-api-ruby-client ) from 0.37.0 to 0.37.1.
- [Release notes](https://github.com/google/google-api-ruby-client/releases )
- [Changelog](https://github.com/googleapis/google-api-ruby-client/blob/master/CHANGELOG.md )
- [Commits](https://github.com/google/google-api-ruby-client/compare/0.37.0...0.37.1 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-02-24 09:04:01 -05:00
dependabot-preview[bot]
9c2d33c91a
Bump algoliasearch-rails from 1.23.2 to 1.24.0 ( #6269 )
...
Bumps [algoliasearch-rails](https://github.com/algolia/algoliasearch-rails ) from 1.23.2 to 1.24.0.
- [Release notes](https://github.com/algolia/algoliasearch-rails/releases )
- [Changelog](https://github.com/algolia/algoliasearch-rails/blob/master/ChangeLog )
- [Commits](https://github.com/algolia/algoliasearch-rails/compare/1.23.2...1.24.0 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-02-24 09:03:31 -05:00
dependabot-preview[bot]
653806f359
Bump httparty from 0.17.3 to 0.18.0 ( #6273 )
...
Bumps [httparty](https://github.com/jnunemaker/httparty ) from 0.17.3 to 0.18.0.
- [Release notes](https://github.com/jnunemaker/httparty/releases )
- [Changelog](https://github.com/jnunemaker/httparty/blob/master/Changelog.md )
- [Commits](https://github.com/jnunemaker/httparty/compare/v0.17.3...v0.18.0 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-02-24 09:03:13 -05:00
rhymes
168f5c597c
Bump Twitter to 7.0 and refactor TwitterBot ( #6246 ) [deploy]
2020-02-24 08:34:41 -05:00
rhymes
ca8ea0874d
Upgrade Stripe to version 5 ( #6181 )
...
* Upgrade stripe and stripe-ruby-mock
* Replace .all with .list
* Replace .delete with .detach_source and add tests
* Fix credits spec
* Refactor StripeActiveCardsController to use Payments::Customer and fix specs
* Use the right notice to show feedback to the user
2020-02-20 14:19:52 -05:00
rhymes
bc385ae6d5
Switch decorators to Rails builtin decorations - take 2 ( #6125 ) [deploy]
...
* Revert "Revert "[deploy] Switch decorators from Draper to Rails builtin decorations (#6040 )" (#6122 ) [deploy]"
This reverts commit d438349550
2020-02-19 15:30:53 -05:00
rhymes
77725ccbdc
Upgrade gems ( #6171 )
...
* Bump to brakeman 4.8.0
* Bump to carrierwave 2.1.0
* Bump to dry-struct 1.3.0
* Bump to google-api-client 0.37.0
* Bump to nokogiri 1.10.8
* Bump to rubyzip 2.2.0
* Bump to shoulda-matchers 4.3.0
* Bump to sidekiq 6.0.5
* Lock to simplecov 0.17.1
2020-02-19 09:43:38 -05:00
rhymes
a56eb8fab0
Enable CORS on public API endpoints ( #6116 ) [deploy]
...
* Enable CORS for public API
* Add specs for Articles API
* Mention CORS in the API docs
2020-02-18 10:47:07 -05:00
dependabot-preview[bot]
102dd5c4f2
Bump rouge from 3.15.0 to 3.16.0 ( #6100 )
2020-02-17 12:05:25 -05:00
